Security Flaw Identified in Rapid7 InsightConnect Plugin

A medium-severity security vulnerability, tracked as CVE-2026-8661, has been reported in specific versions of the Rapid7 InsightConnect Markdown Plugin. This flaw could enable remote attackers to execute server-side JavaScript or initiate arbitrary HTTP requests. The issue stems from specially crafted Markdown input on Linux systems.